Updated plaintext password issue
Added SQL injection vulnerability issue

Recommends using prepared statements instead.